exploitDog

CVE-2023-21268

Опубликовано: 14 авг. 2023

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is not needed for exploitation.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:google:android:11.0:-:*:*:*:*:*:*

cpe:2.3:o:google:android:12.0:-:*:*:*:*:*:*

cpe:2.3:o:google:android:12.1:-:*:*:*:*:*:*

cpe:2.3:o:google:android:13.0:-:*:*:*:*:*:*

EPSS

Процентиль: 4%

0.00018

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

GHSA-6qr9-vw5g-627h

CVSS3: 5.5

github

больше 2 лет назад

In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 4%

0.00018

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-22